Avatar module WordPress XSS

The vulnerability of the “Avatar” module in the WordPress content management system is related to the failure to protect the website structure when processing parameters like commentauthor and authorname. This occurs due to incorrect execution of the function sequence. Exploiting this vulnerabili...

TeamWork Job Links profileChange and coverChange arbitrary file upload vulnerability (CNVD-2017-33670)

TeamWork Photo Fusion is a web-based photo management system that allows users to upload photos or view other users' photos. changeAvatar and changeCover are both functional modules. changeAvatar is a module for changing a user's avatar. changeCover is a module for changing a cover. changeAvatar ...